@aptos-labs/ts-sdk 6.3.1 → 7.0.1

package/dist/account/AbstractKeylessAccount.js

@@ -0,0 +1,440 @@
+// Copyright © Aptos Foundation
+// SPDX-License-Identifier: Apache-2.0
+import { EventEmitter } from "eventemitter3";
+import { jwtDecode } from "jwt-decode";
+// Register keyless variants with AnyPublicKey/AnySignature registry
+import "../core/crypto/keylessRegistration.js";
+import { EphemeralCertificateVariant, SigningScheme } from "../types/index.js";
+import { AccountAddress } from "../core/accountAddress.js";
+import { AnyPublicKey, AnySignature } from "../core/crypto/singleKey.js";
+import { KeylessSignature, EphemeralCertificate, ZeroKnowledgeSig, getKeylessConfig, fetchJWK, } from "../core/crypto/keyless.js";
+import { EphemeralKeyPair } from "./EphemeralKeyPair.js";
+import { Hex } from "../core/hex.js";
+import { AccountAuthenticatorSingleKey } from "../transactions/authenticator/account.js";
+import { Serializable } from "../bcs/index.js";
+import { deriveTransactionType, generateSigningMessage } from "../transactions/transactionBuilder/signingMessage.js";
+import { base64UrlDecode, warnIfDevelopment } from "../utils/helpers.js";
+import { KeylessError, KeylessErrorType } from "../errors/index.js";
+// Import and re-export from lightweight module for backward compatibility
+import { isKeylessSigner } from "./keylessSigner.js";
+export { isKeylessSigner };
+/**
+ * Account implementation for the Keyless authentication scheme.  This abstract class is used for standard Keyless Accounts
+ * and Federated Keyless Accounts.
+ * @group Implementation
+ * @category Account (On-Chain Model)
+ */
+export class AbstractKeylessAccount extends Serializable {
+    static PEPPER_LENGTH = 31;
+    /**
+     * The KeylessPublicKey associated with the account
+     * @group Implementation
+     * @category Account (On-Chain Model)
+     */
+    publicKey;
+    /**
+     * The EphemeralKeyPair used to generate sign.
+     * @group Implementation
+     * @category Account (On-Chain Model)
+     */
+    ephemeralKeyPair;
+    /**
+     * The claim on the JWT to identify a user.  This is typically 'sub' or 'email'.
+     * @group Implementation
+     * @category Account (On-Chain Model)
+     */
+    uidKey;
+    /**
+     * The value of the uidKey claim on the JWT.  This intended to be a stable user identifier.
+     * @group Implementation
+     * @category Account (On-Chain Model)
+     */
+    uidVal;
+    /**
+     * The value of the 'aud' claim on the JWT, also known as client ID.  This is the identifier for the dApp's
+     * OIDC registration with the identity provider.
+     * @group Implementation
+     * @category Account (On-Chain Model)
+     */
+    aud;
+    /**
+     * A value contains 31 bytes of entropy that preserves privacy of the account. Typically fetched from a pepper provider.
+     * @group Implementation
+     * @category Account (On-Chain Model)
+     */
+    pepper;
+    /**
+     * Account address associated with the account
+     * @group Implementation
+     * @category Account (On-Chain Model)
+     */
+    accountAddress;
+    /**
+     * The zero knowledge signature (if ready) which contains the proof used to validate the EphemeralKeyPair.
+     * @group Implementation
+     * @category Account (On-Chain Model)
+     */
+    proof;
+    /**
+     * The proof of the EphemeralKeyPair or a promise that provides the proof.  This is used to allow for awaiting on
+     * fetching the proof.
+     * @group Implementation
+     * @category Account (On-Chain Model)
+     */
+    proofOrPromise;
+    /**
+     * Signing scheme used to sign transactions
+     * @group Implementation
+     * @category Account (On-Chain Model)
+     */
+    signingScheme = SigningScheme.SingleKey;
+    /**
+     * The JWT token used to derive the account
+     * @group Implementation
+     * @category Account (On-Chain Model)
+     */
+    jwt;
+    /**
+     * The hash of the verification key used to verify the proof. This is optional and can be used to check verifying key
+     * rotations which may invalidate the proof.
+     */
+    verificationKeyHash;
+    /**
+     * An event emitter used to assist in handling asynchronous proof fetching.
+     * @group Implementation
+     * @category Account (On-Chain Model)
+     */
+    emitter;
+    /**
+     * Use the static generator `create(...)` instead.
+     * Creates an instance of the KeylessAccount with an optional proof.
+     *
+     * @param args - The parameters for creating a KeylessAccount.
+     * @param args.address - Optional account address associated with the KeylessAccount.
+     * @param args.publicKey - A KeylessPublicKey or FederatedKeylessPublicKey.
+     * @param args.ephemeralKeyPair - The ephemeral key pair used in the account creation.
+     * @param args.iss - A JWT issuer.
+     * @param args.uidKey - The claim on the JWT to identify a user.  This is typically 'sub' or 'email'.
+     * @param args.uidVal - The unique id for this user, intended to be a stable user identifier.
+     * @param args.aud - The value of the 'aud' claim on the JWT, also known as client ID.  This is the identifier for the dApp's
+     * OIDC registration with the identity provider.
+     * @param args.pepper - A hexadecimal input used for additional security.
+     * @param args.proof - A Zero Knowledge Signature or a promise that resolves to one.
+     * @param args.proofFetchCallback - Optional callback function for fetching proof.
+     * @param args.jwt - A JSON Web Token used for authentication.
+     * @param args.verificationKeyHash Optional 32-byte verification key hash as hex input used to check proof validity.
+     */
+    constructor(args) {
+        super();
+        const { address, ephemeralKeyPair, publicKey, uidKey, uidVal, aud, pepper, proof, proofFetchCallback, jwt, verificationKeyHash, } = args;
+        this.ephemeralKeyPair = ephemeralKeyPair;
+        this.publicKey = publicKey;
+        this.accountAddress = address ? AccountAddress.from(address) : this.publicKey.authKey().derivedAddress();
+        this.uidKey = uidKey;
+        this.uidVal = uidVal;
+        this.aud = aud;
+        this.jwt = jwt;
+        this.emitter = new EventEmitter();
+        this.proofOrPromise = proof;
+        if (proof instanceof ZeroKnowledgeSig) {
+            this.proof = proof;
+        }
+        else {
+            if (proofFetchCallback === undefined) {
+                throw new Error("Must provide callback for async proof fetch");
+            }
+            this.emitter.on("proofFetchFinish", async (status) => {
+                await proofFetchCallback(status);
+                this.emitter.removeAllListeners();
+            });
+            // Note, this is purposely not awaited to be non-blocking.  The caller should await on the proofFetchCallback.
+            this.init(proof);
+        }
+        const pepperBytes = Hex.fromHexInput(pepper).toUint8Array();
+        if (pepperBytes.length !== AbstractKeylessAccount.PEPPER_LENGTH) {
+            throw new Error(`Pepper length in bytes should be ${AbstractKeylessAccount.PEPPER_LENGTH}`);
+        }
+        this.pepper = pepperBytes;
+        if (verificationKeyHash !== undefined) {
+            if (Hex.hexInputToUint8Array(verificationKeyHash).length !== 32) {
+                throw new Error("verificationKeyHash must be 32 bytes");
+            }
+            this.verificationKeyHash = Hex.hexInputToUint8Array(verificationKeyHash);
+        }
+    }
+    getAnyPublicKey() {
+        return new AnyPublicKey(this.publicKey);
+    }
+    /**
+     * This initializes the asynchronous proof fetch
+     * @return Emits whether the proof succeeds or fails, but has no return.
+     * @group Implementation
+     * @category Account (On-Chain Model)
+     */
+    async init(promise) {
+        try {
+            this.proof = await promise;
+            this.emitter.emit("proofFetchFinish", { status: "Success" });
+        }
+        catch (error) {
+            if (error instanceof Error) {
+                this.emitter.emit("proofFetchFinish", { status: "Failed", error: error.toString() });
+            }
+            else {
+                this.emitter.emit("proofFetchFinish", { status: "Failed", error: "Unknown" });
+            }
+        }
+    }
+    /**
+     * Serializes the jwt data into a format suitable for transmission or storage.
+     * This function ensures that both the jwt data and the proof are properly serialized.
+     *
+     * @param serializer - The serializer instance used to convert the jwt data into bytes.
+     */
+    serialize(serializer) {
+        this.accountAddress.serialize(serializer);
+        serializer.serializeStr(this.jwt);
+        serializer.serializeStr(this.uidKey);
+        serializer.serializeFixedBytes(this.pepper);
+        this.ephemeralKeyPair.serialize(serializer);
+        if (this.proof === undefined) {
+            throw new Error("Cannot serialize - proof undefined");
+        }
+        this.proof.serialize(serializer);
+        serializer.serializeOption(this.verificationKeyHash, 32);
+    }
+    static partialDeserialize(deserializer) {
+        const address = AccountAddress.deserialize(deserializer);
+        const jwt = deserializer.deserializeStr();
+        const uidKey = deserializer.deserializeStr();
+        const pepper = deserializer.deserializeFixedBytes(31);
+        const ephemeralKeyPair = EphemeralKeyPair.deserialize(deserializer);
+        const proof = ZeroKnowledgeSig.deserialize(deserializer);
+        const verificationKeyHash = deserializer.deserializeOption("fixedBytes", 32);
+        return { address, jwt, uidKey, pepper, ephemeralKeyPair, proof, verificationKeyHash };
+    }
+    /**
+     * Checks if the proof is expired.  If so the account must be re-derived with a new EphemeralKeyPair
+     * and JWT token.
+     * @return boolean
+     * @group Implementation
+     * @category Account (On-Chain Model)
+     */
+    isExpired() {
+        return this.ephemeralKeyPair.isExpired();
+    }
+    /**
+     * Sign a message using Keyless.
+     * @param message the message to sign, as binary input
+     * @return the AccountAuthenticator containing the signature, together with the account's public key
+     * @group Implementation
+     * @category Account (On-Chain Model)
+     */
+    signWithAuthenticator(message) {
+        const signature = new AnySignature(this.sign(message));
+        const publicKey = new AnyPublicKey(this.publicKey);
+        return new AccountAuthenticatorSingleKey(publicKey, signature);
+    }
+    /**
+     * Sign a transaction using Keyless.
+     * @param transaction the raw transaction
+     * @return the AccountAuthenticator containing the signature of the transaction, together with the account's public key
+     * @group Implementation
+     * @category Account (On-Chain Model)
+     */
+    signTransactionWithAuthenticator(transaction) {
+        const signature = new AnySignature(this.signTransaction(transaction));
+        const publicKey = new AnyPublicKey(this.publicKey);
+        return new AccountAuthenticatorSingleKey(publicKey, signature);
+    }
+    /**
+     * Waits for asynchronous proof fetching to finish.
+     * @return
+     * @group Implementation
+     * @category Account (On-Chain Model)
+     */
+    async waitForProofFetch() {
+        if (this.proofOrPromise instanceof Promise) {
+            await this.proofOrPromise;
+        }
+    }
+    /**
+     * Validates that the Keyless Account can be used to sign transactions.
+     * @return
+     */
+    async checkKeylessAccountValidity(aptosConfig) {
+        if (this.isExpired()) {
+            throw KeylessError.fromErrorType({
+                type: KeylessErrorType.EPHEMERAL_KEY_PAIR_EXPIRED,
+            });
+        }
+        await this.waitForProofFetch();
+        if (this.proof === undefined) {
+            throw KeylessError.fromErrorType({
+                type: KeylessErrorType.ASYNC_PROOF_FETCH_FAILED,
+            });
+        }
+        const header = jwtDecode(this.jwt, { header: true });
+        if (header.kid === undefined) {
+            throw KeylessError.fromErrorType({
+                type: KeylessErrorType.JWT_PARSING_ERROR,
+                details: "checkKeylessAccountValidity failed. JWT is missing 'kid' in header. This should never happen.",
+            });
+        }
+        if (this.verificationKeyHash !== undefined) {
+            const { verificationKey } = await getKeylessConfig({ aptosConfig });
+            if (Hex.hexInputToString(verificationKey.hash()) !== Hex.hexInputToString(this.verificationKeyHash)) {
+                throw KeylessError.fromErrorType({
+                    type: KeylessErrorType.INVALID_PROOF_VERIFICATION_KEY_NOT_FOUND,
+                });
+            }
+        }
+        else {
+            warnIfDevelopment("[Aptos SDK] The verification key hash was not set. Proof may be invalid if the verification key has rotated.");
+        }
+        await AbstractKeylessAccount.fetchJWK({ aptosConfig, publicKey: this.publicKey, kid: header.kid });
+    }
+    /**
+     * Sign the given message using Keyless.
+     * @param message in HexInput format
+     * @returns Signature
+     * @group Implementation
+     * @category Account (On-Chain Model)
+     */
+    sign(message) {
+        const { expiryDateSecs } = this.ephemeralKeyPair;
+        if (this.isExpired()) {
+            throw KeylessError.fromErrorType({
+                type: KeylessErrorType.EPHEMERAL_KEY_PAIR_EXPIRED,
+            });
+        }
+        if (this.proof === undefined) {
+            throw KeylessError.fromErrorType({
+                type: KeylessErrorType.PROOF_NOT_FOUND,
+                details: "Proof not found - make sure to call `await account.checkKeylessAccountValidity()` before signing.",
+            });
+        }
+        const ephemeralPublicKey = this.ephemeralKeyPair.getPublicKey();
+        const ephemeralSignature = this.ephemeralKeyPair.sign(message);
+        return new KeylessSignature({
+            jwtHeader: base64UrlDecode(this.jwt.split(".")[0]),
+            ephemeralCertificate: new EphemeralCertificate(this.proof, EphemeralCertificateVariant.ZkProof),
+            expiryDateSecs,
+            ephemeralPublicKey,
+            ephemeralSignature,
+        });
+    }
+    /**
+     * Sign the given transaction with Keyless.
+     * Signs the transaction and proof to guard against proof malleability.
+     * @param transaction the transaction to be signed
+     * @returns KeylessSignature
+     * @group Implementation
+     * @category Account (On-Chain Model)
+     */
+    signTransaction(transaction) {
+        if (this.proof === undefined) {
+            throw KeylessError.fromErrorType({
+                type: KeylessErrorType.PROOF_NOT_FOUND,
+                details: "Proof not found - make sure to call `await account.checkKeylessAccountValidity()` before signing.",
+            });
+        }
+        const raw = deriveTransactionType(transaction);
+        const txnAndProof = new TransactionAndProof(raw, this.proof.proof);
+        const signMess = txnAndProof.hash();
+        return this.sign(signMess);
+    }
+    getSigningMessage(transaction) {
+        if (this.proof === undefined) {
+            throw KeylessError.fromErrorType({
+                type: KeylessErrorType.PROOF_NOT_FOUND,
+                details: "Proof not found - make sure to call `await account.checkKeylessAccountValidity()` before signing.",
+            });
+        }
+        const raw = deriveTransactionType(transaction);
+        const txnAndProof = new TransactionAndProof(raw, this.proof.proof);
+        return txnAndProof.hash();
+    }
+    /**
+     * Note - This function is currently incomplete and should only be used to verify ownership of the KeylessAccount
+     *
+     * Verifies a signature given the message.
+     *
+     * @param args.message the message that was signed.
+     * @param args.signature the KeylessSignature to verify
+     * @returns boolean
+     * @group Implementation
+     * @category Account (On-Chain Model)
+     */
+    verifySignature(args) {
+        return this.publicKey.verifySignature(args);
+    }
+    async verifySignatureAsync(args) {
+        return this.publicKey.verifySignatureAsync({
+            ...args,
+        });
+    }
+    /**
+     * Fetches the JWK from the issuer's well-known JWKS endpoint.
+     *
+     * @param args.publicKey The keyless public key to query
+     * @param args.kid The kid of the JWK to fetch
+     * @returns A JWK matching the `kid` in the JWT header.
+     * @throws {KeylessError} If the JWK cannot be fetched
+     */
+    static async fetchJWK(args) {
+        return fetchJWK(args);
+    }
+}
+/**
+ * A container class to hold a transaction and a proof.  It implements CryptoHashable which is used to create
+ * the signing message for Keyless transactions.  We sign over the proof to ensure non-malleability.
+ * @group Implementation
+ * @category Account (On-Chain Model)
+ */
+export class TransactionAndProof extends Serializable {
+    /**
+     * The transaction to sign.
+     * @group Implementation
+     * @category Account (On-Chain Model)
+     */
+    transaction;
+    /**
+     * The zero knowledge proof used in signing the transaction.
+     * @group Implementation
+     * @category Account (On-Chain Model)
+     */
+    proof;
+    /**
+     * The domain separator prefix used when hashing.
+     * @group Implementation
+     * @category Account (On-Chain Model)
+     */
+    domainSeparator = "APTOS::TransactionAndProof";
+    constructor(transaction, proof) {
+        super();
+        this.transaction = transaction;
+        this.proof = proof;
+    }
+    /**
+     * Serializes the transaction data into a format suitable for transmission or storage.
+     * This function ensures that both the transaction bytes and the proof are properly serialized.
+     *
+     * @param serializer - The serializer instance used to convert the transaction data into bytes.
+     */
+    serialize(serializer) {
+        serializer.serializeFixedBytes(this.transaction.bcsToBytes());
+        serializer.serializeOption(this.proof);
+    }
+    /**
+     * Hashes the bcs serialized from of the class. This is the typescript corollary to the BCSCryptoHash macro in aptos-core.
+     *
+     * @returns Uint8Array
+     * @group Implementation
+     * @category Account (On-Chain Model)
+     */
+    hash() {
+        return generateSigningMessage(this.bcsToBytes(), this.domainSeparator);
+    }
+}
+//# sourceMappingURL=AbstractKeylessAccount.js.map

package/dist/account/AbstractKeylessAccount.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AbstractKeylessAccount.js","sourceRoot":"","sources":["../../src/account/AbstractKeylessAccount.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,sCAAsC;AAEtC,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,oEAAoE;AACpE,OAAO,uCAAuC,CAAC;AAC/C,OAAO,EAAE,2BAA2B,EAAY,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACzF,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAEL,gBAAgB,EAChB,oBAAoB,EACpB,gBAAgB,EAGhB,gBAAgB,EAChB,QAAQ,GAET,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AACrC,OAAO,EAAE,6BAA6B,EAAE,MAAM,0CAA0C,CAAC;AACzF,OAAO,EAAgB,YAAY,EAAc,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,sDAAsD,CAAC;AAErH,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAGzE,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAGpE,0EAA0E;AAC1E,OAAO,EAAE,eAAe,EAAsB,MAAM,oBAAoB,CAAC;AAEzE,OAAO,EAAE,eAAe,EAAsB,CAAC;AAE/C;;;;;GAKG;AACH,MAAM,OAAgB,sBAAuB,SAAQ,YAAY;IAC/D,MAAM,CAAU,aAAa,GAAW,EAAE,CAAC;IAE3C;;;;OAIG;IACM,SAAS,CAA+C;IAEjE;;;;OAIG;IACM,gBAAgB,CAAmB;IAE5C;;;;OAIG;IACM,MAAM,CAAS;IAExB;;;;OAIG;IACM,MAAM,CAAS;IAExB;;;;;OAKG;IACM,GAAG,CAAS;IAErB;;;;OAIG;IACM,MAAM,CAAa;IAE5B;;;;OAIG;IACM,cAAc,CAAiB;IAExC;;;;OAIG;IACH,KAAK,CAA+B;IAEpC;;;;;OAKG;IACM,cAAc,CAA+C;IAEtE;;;;OAIG;IACM,aAAa,GAAkB,aAAa,CAAC,SAAS,CAAC;IAEhE;;;;OAIG;IACM,GAAG,CAAS;IAErB;;;OAGG;IACM,mBAAmB,CAAc;IAE1C;;;;OAIG;IACc,OAAO,CAAiC;IAEzD;;;;;;;;;;;;;;;;;;OAkBG;IACH,YAAsB,IAarB;QACC,KAAK,EAAE,CAAC;QACR,MAAM,EACJ,OAAO,EACP,gBAAgB,EAChB,SAAS,EACT,MAAM,EACN,MAAM,EACN,GAAG,EACH,MAAM,EACN,KAAK,EACL,kBAAkB,EAClB,GAAG,EACH,mBAAmB,GACpB,GAAG,IAAI,CAAC;QACT,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QACzC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,cAAc,EAAE,CAAC;QACzG,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,OAAO,GAAG,IAAI,YAAY,EAAoB,CAAC;QACpD,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;QAC5B,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;YACtC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACrB,CAAC;aAAM,CAAC;YACN,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;gBACrC,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACjE,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBACnD,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;gBACjC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;YACpC,CAAC,CAAC,CAAC;YACH,8GAA8G;YAC9G,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC;QACD,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,YAAY,EAAE,CAAC;QAC5D,IAAI,WAAW,CAAC,MAAM,KAAK,sBAAsB,CAAC,aAAa,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,oCAAoC,sBAAsB,CAAC,aAAa,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC;QAC1B,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;YACtC,IAAI,GAAG,CAAC,oBAAoB,CAAC,mBAAmB,CAAC,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;gBAChE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC1D,CAAC;YACD,IAAI,CAAC,mBAAmB,GAAG,GAAG,CAAC,oBAAoB,CAAC,mBAAmB,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,eAAe;QACb,OAAO,IAAI,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1C,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CAAC,OAAkC;QAC3C,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,GAAG,MAAM,OAAO,CAAC;YAC3B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;gBAC3B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACvF,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;YAChF,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,SAAS,CAAC,UAAsB;QAC9B,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC1C,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrC,UAAU,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACjC,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,CAAC,kBAAkB,CAAC,YAA0B;QASlD,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,YAAY,CAAC,cAAc,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,YAAY,CAAC,cAAc,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,YAAY,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;QACtD,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;QACpE,MAAM,KAAK,GAAG,gBAAgB,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;QACzD,MAAM,mBAAmB,GAAG,YAAY,CAAC,iBAAiB,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QAE7E,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;IACxF,CAAC;IAED;;;;;;OAMG;IACH,SAAS;QACP,OAAO,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC;IAC3C,CAAC;IAED;;;;;;OAMG;IACH,qBAAqB,CAAC,OAAiB;QACrC,MAAM,SAAS,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QACvD,MAAM,SAAS,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACnD,OAAO,IAAI,6BAA6B,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACjE,CAAC;IAED;;;;;;OAMG;IACH,gCAAgC,CAAC,WAA8B;QAC7D,MAAM,SAAS,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC,CAAC;QACtE,MAAM,SAAS,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACnD,OAAO,IAAI,6BAA6B,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACjE,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,iBAAiB;QACrB,IAAI,IAAI,CAAC,cAAc,YAAY,OAAO,EAAE,CAAC;YAC3C,MAAM,IAAI,CAAC,cAAc,CAAC;QAC5B,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,2BAA2B,CAAC,WAAwB;QACxD,IAAI,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACrB,MAAM,YAAY,CAAC,aAAa,CAAC;gBAC/B,IAAI,EAAE,gBAAgB,CAAC,0BAA0B;aAClD,CAAC,CAAC;QACL,CAAC;QACD,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,YAAY,CAAC,aAAa,CAAC;gBAC/B,IAAI,EAAE,gBAAgB,CAAC,wBAAwB;aAChD,CAAC,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,YAAY,CAAC,aAAa,CAAC;gBAC/B,IAAI,EAAE,gBAAgB,CAAC,iBAAiB;gBACxC,OAAO,EAAE,+FAA+F;aACzG,CAAC,CAAC;QACL,CAAC;QACD,IAAI,IAAI,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;YAC3C,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,gBAAgB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;YACpE,IAAI,GAAG,CAAC,gBAAgB,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,KAAK,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBACpG,MAAM,YAAY,CAAC,aAAa,CAAC;oBAC/B,IAAI,EAAE,gBAAgB,CAAC,wCAAwC;iBAChE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,CAAC;YACN,iBAAiB,CACf,8GAA8G,CAC/G,CAAC;QACJ,CAAC;QACD,MAAM,sBAAsB,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IACrG,CAAC;IAED;;;;;;OAMG;IACH,IAAI,CAAC,OAAiB;QACpB,MAAM,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC;QACjD,IAAI,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACrB,MAAM,YAAY,CAAC,aAAa,CAAC;gBAC/B,IAAI,EAAE,gBAAgB,CAAC,0BAA0B;aAClD,CAAC,CAAC;QACL,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,YAAY,CAAC,aAAa,CAAC;gBAC/B,IAAI,EAAE,gBAAgB,CAAC,eAAe;gBACtC,OAAO,EAAE,mGAAmG;aAC7G,CAAC,CAAC;QACL,CAAC;QACD,MAAM,kBAAkB,GAAG,IAAI,CAAC,gBAAgB,CAAC,YAAY,EAAE,CAAC;QAChE,MAAM,kBAAkB,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE/D,OAAO,IAAI,gBAAgB,CAAC;YAC1B,SAAS,EAAE,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAClD,oBAAoB,EAAE,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,EAAE,2BAA2B,CAAC,OAAO,CAAC;YAC/F,cAAc;YACd,kBAAkB;YAClB,kBAAkB;SACnB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACH,eAAe,CAAC,WAA8B;QAC5C,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,YAAY,CAAC,aAAa,CAAC;gBAC/B,IAAI,EAAE,gBAAgB,CAAC,eAAe;gBACtC,OAAO,EAAE,mGAAmG;aAC7G,CAAC,CAAC;QACL,CAAC;QACD,MAAM,GAAG,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAC;QAC/C,MAAM,WAAW,GAAG,IAAI,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACnE,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;IAED,iBAAiB,CAAC,WAA8B;QAC9C,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,YAAY,CAAC,aAAa,CAAC;gBAC/B,IAAI,EAAE,gBAAgB,CAAC,eAAe;gBACtC,OAAO,EAAE,mGAAmG;aAC7G,CAAC,CAAC;QACL,CAAC;QACD,MAAM,GAAG,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAC;QAC/C,MAAM,WAAW,GAAG,IAAI,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACnE,OAAO,WAAW,CAAC,IAAI,EAAE,CAAC;IAC5B,CAAC;IAED;;;;;;;;;;OAUG;IACH,eAAe,CAAC,IAKf;QACC,OAAO,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,IAK1B;QACC,OAAO,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC;YACzC,GAAG,IAAI;SACR,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAIrB;QACC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;;AAGH;;;;;GAKG;AACH,MAAM,OAAO,mBAAoB,SAAQ,YAAY;IACnD;;;;OAIG;IACH,WAAW,CAA4B;IAEvC;;;;OAIG;IACH,KAAK,CAAW;IAEhB;;;;OAIG;IACM,eAAe,GAAG,4BAA4B,CAAC;IAExD,YAAY,WAAsC,EAAE,KAAe;QACjE,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED;;;;;OAKG;IACH,SAAS,CAAC,UAAsB;QAC9B,UAAU,CAAC,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC;QAC9D,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAED;;;;;;OAMG;IACH,IAAI;QACF,OAAO,sBAAsB,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IACzE,CAAC;CACF"}

package/dist/account/AbstractedAccount.d.ts

@@ -0,0 +1,61 @@
+import { AccountAddress } from "../core/index.js";
+import { AbstractPublicKey, AbstractSignature } from "../core/crypto/abstraction.js";
+import { SigningScheme, HexInput, MoveFunctionId } from "../types/index.js";
+import { Account } from "./Account.js";
+import { AnyRawTransaction } from "../transactions/types.js";
+import { AccountAuthenticatorAbstraction } from "../transactions/authenticator/account.js";
+import { Ed25519Account } from "./Ed25519Account.js";
+type AbstractedAccountConstructorArgs = {
+    /**
+     * The account address of the account.
+     */
+    accountAddress: AccountAddress;
+    /**
+     * The signer function signs transactions and returns the `authenticator` bytes in the `AbstractionAuthData`.
+     *
+     * @param digest - The SHA256 hash of the transaction signing message
+     * @returns The `authenticator` bytes that can be used to verify the signature.
+     */
+    signer: (digest: HexInput) => Uint8Array;
+    /**
+     * The authentication function that will be used to verify the signature.
+     *
+     * @example
+     * ```ts
+     * const authenticationFunction = `${accountAddress}::permissioned_delegation::authenticate`;
+     * ```
+     */
+    authenticationFunction: MoveFunctionId;
+};
+export declare class AbstractedAccount extends Account {
+    readonly publicKey: AbstractPublicKey;
+    readonly accountAddress: AccountAddress;
+    readonly authenticationFunction: MoveFunctionId;
+    readonly signingScheme = SigningScheme.SingleKey;
+    constructor({ signer, accountAddress, authenticationFunction }: AbstractedAccountConstructorArgs);
+    /**
+     * Creates an `AbstractedAccount` from an `Ed25519Account` that has a permissioned signer function and
+     * using the `0x1::permissioned_delegation::authenticate` function to verify the signature.
+     *
+     * @param signer - The `Ed25519Account` that can be used to sign permissioned transactions.
+     * @returns The `AbstractedAccount`
+     */
+    static fromPermissionedSigner({ signer, accountAddress, }: {
+        signer: Ed25519Account;
+        accountAddress?: AccountAddress;
+    }): AbstractedAccount;
+    static generateAccountAbstractionMessage(message: HexInput, functionInfo: string): HexInput;
+    signWithAuthenticator(message: HexInput): AccountAuthenticatorAbstraction;
+    signTransactionWithAuthenticator(transaction: AnyRawTransaction): AccountAuthenticatorAbstraction;
+    sign: (message: HexInput) => AbstractSignature;
+    signTransaction(transaction: AnyRawTransaction): AbstractSignature;
+    /**
+     * Update the signer function for the account. This can be done after asynchronous operations are complete
+     * to update the context of the signer function.
+     *
+     * @param signer - The new signer function to use for the account.
+     */
+    setSigner(signer: (digest: HexInput) => HexInput): void;
+}
+export {};
+//# sourceMappingURL=AbstractedAccount.d.ts.map

package/dist/account/AbstractedAccount.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AbstractedAccount.d.ts","sourceRoot":"","sources":["../../src/account/AbstractedAccount.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAK7D,OAAO,EAA6B,+BAA+B,EAAE,MAAM,0CAA0C,CAAC;AACtH,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAKrD,KAAK,gCAAgC,GAAG;IACtC;;OAEG;IACH,cAAc,EAAE,cAAc,CAAC;IAC/B;;;;;OAKG;IACH,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,KAAK,UAAU,CAAC;IACzC;;;;;;;OAOG;IACH,sBAAsB,EAAE,cAAc,CAAC;CACxC,CAAC;AAEF,qBAAa,iBAAkB,SAAQ,OAAO;IAC5C,SAAgB,SAAS,EAAE,iBAAiB,CAAC;IAE7C,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IAExC,QAAQ,CAAC,sBAAsB,EAAE,cAAc,CAAC;IAEhD,QAAQ,CAAC,aAAa,2BAA2B;gBAErC,EAAE,MAAM,EAAE,cAAc,EAAE,sBAAsB,EAAE,EAAE,gCAAgC;IAahG;;;;;;OAMG;WACW,sBAAsB,CAAC,EACnC,MAAM,EACN,cAAc,GACf,EAAE;QACD,MAAM,EAAE,cAAc,CAAC;QACvB,cAAc,CAAC,EAAE,cAAc,CAAC;KACjC;WAaa,iCAAiC,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,GAAG,QAAQ;IAKlG,qBAAqB,CAAC,OAAO,EAAE,QAAQ,GAAG,+BAA+B;IASzE,gCAAgC,CAAC,WAAW,EAAE,iBAAiB,GAAG,+BAA+B;IAQjG,IAAI,EAAE,CAAC,OAAO,EAAE,QAAQ,KAAK,iBAAiB,CAAC;IAE/C,eAAe,CAAC,WAAW,EAAE,iBAAiB,GAAG,iBAAiB;IAIlE;;;;;OAKG;IACI,SAAS,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,KAAK,QAAQ,GAAG,IAAI;CAG/D"}

package/dist/account/AbstractedAccount.js

@@ -0,0 +1,71 @@
+import { sha3_256 } from "@noble/hashes/sha3.js";
+import { Hex } from "../core/hex.js";
+import { AbstractPublicKey, AbstractSignature } from "../core/crypto/abstraction.js";
+import { SigningScheme } from "../types/index.js";
+import { Account } from "./Account.js";
+import { generateSigningMessage, generateSigningMessageForTransaction, } from "../transactions/transactionBuilder/signingMessage.js";
+import { AccountAbstractionMessage, AccountAuthenticatorAbstraction } from "../transactions/authenticator/account.js";
+import { Serializer } from "../bcs/serializer.js";
+import { isValidFunctionInfo } from "../utils/helpers.js";
+import { ACCOUNT_ABSTRACTION_SIGNING_DATA_SALT } from "../utils/const.js";
+export class AbstractedAccount extends Account {
+    publicKey;
+    accountAddress;
+    authenticationFunction;
+    signingScheme = SigningScheme.SingleKey;
+    constructor({ signer, accountAddress, authenticationFunction }) {
+        super();
+        if (!isValidFunctionInfo(authenticationFunction)) {
+            throw new Error(`Invalid authentication function ${authenticationFunction} passed into AbstractedAccount`);
+        }
+        this.authenticationFunction = authenticationFunction;
+        this.accountAddress = accountAddress;
+        this.publicKey = new AbstractPublicKey(this.accountAddress);
+        this.sign = (digest) => new AbstractSignature(signer(digest));
+    }
+    /**
+     * Creates an `AbstractedAccount` from an `Ed25519Account` that has a permissioned signer function and
+     * using the `0x1::permissioned_delegation::authenticate` function to verify the signature.
+     *
+     * @param signer - The `Ed25519Account` that can be used to sign permissioned transactions.
+     * @returns The `AbstractedAccount`
+     */
+    static fromPermissionedSigner({ signer, accountAddress, }) {
+        return new AbstractedAccount({
+            signer: (digest) => {
+                const serializer = new Serializer();
+                signer.publicKey.serialize(serializer);
+                signer.sign(digest).serialize(serializer);
+                return serializer.toUint8Array();
+            },
+            accountAddress: accountAddress ?? signer.accountAddress,
+            authenticationFunction: "0x1::permissioned_delegation::authenticate",
+        });
+    }
+    static generateAccountAbstractionMessage(message, functionInfo) {
+        const accountAbstractionMessage = new AccountAbstractionMessage(message, functionInfo);
+        return generateSigningMessage(accountAbstractionMessage.bcsToBytes(), ACCOUNT_ABSTRACTION_SIGNING_DATA_SALT);
+    }
+    signWithAuthenticator(message) {
+        const messageBytes = Hex.fromHexInput(message).toUint8Array();
+        return new AccountAuthenticatorAbstraction(this.authenticationFunction, sha3_256(messageBytes), this.sign(sha3_256(messageBytes)).toUint8Array());
+    }
+    signTransactionWithAuthenticator(transaction) {
+        const message = AbstractedAccount.generateAccountAbstractionMessage(generateSigningMessageForTransaction(transaction), this.authenticationFunction);
+        return this.signWithAuthenticator(message);
+    }
+    sign;
+    signTransaction(transaction) {
+        return this.sign(generateSigningMessageForTransaction(transaction));
+    }
+    /**
+     * Update the signer function for the account. This can be done after asynchronous operations are complete
+     * to update the context of the signer function.
+     *
+     * @param signer - The new signer function to use for the account.
+     */
+    setSigner(signer) {
+        this.sign = (digest) => new AbstractSignature(signer(digest));
+    }
+}
+//# sourceMappingURL=AbstractedAccount.js.map

package/dist/account/AbstractedAccount.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AbstractedAccount.js","sourceRoot":"","sources":["../../src/account/AbstractedAccount.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAEjD,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AACrC,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AACrF,OAAO,EAAE,aAAa,EAA4B,MAAM,mBAAmB,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,OAAO,EACL,sBAAsB,EACtB,oCAAoC,GACrC,MAAM,sDAAsD,CAAC;AAC9D,OAAO,EAAE,yBAAyB,EAAE,+BAA+B,EAAE,MAAM,0CAA0C,CAAC;AAEtH,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,qCAAqC,EAAE,MAAM,mBAAmB,CAAC;AAyB1E,MAAM,OAAO,iBAAkB,SAAQ,OAAO;IAC5B,SAAS,CAAoB;IAEpC,cAAc,CAAiB;IAE/B,sBAAsB,CAAiB;IAEvC,aAAa,GAAG,aAAa,CAAC,SAAS,CAAC;IAEjD,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,sBAAsB,EAAoC;QAC9F,KAAK,EAAE,CAAC;QAER,IAAI,CAAC,mBAAmB,CAAC,sBAAsB,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,mCAAmC,sBAAsB,gCAAgC,CAAC,CAAC;QAC7G,CAAC;QAED,IAAI,CAAC,sBAAsB,GAAG,sBAAsB,CAAC;QACrD,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,SAAS,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,GAAG,CAAC,MAAgB,EAAE,EAAE,CAAC,IAAI,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED;;;;;;OAMG;IACI,MAAM,CAAC,sBAAsB,CAAC,EACnC,MAAM,EACN,cAAc,GAIf;QACC,OAAO,IAAI,iBAAiB,CAAC;YAC3B,MAAM,EAAE,CAAC,MAAgB,EAAE,EAAE;gBAC3B,MAAM,UAAU,GAAG,IAAI,UAAU,EAAE,CAAC;gBACpC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;gBACvC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;gBAC1C,OAAO,UAAU,CAAC,YAAY,EAAE,CAAC;YACnC,CAAC;YACD,cAAc,EAAE,cAAc,IAAI,MAAM,CAAC,cAAc;YACvD,sBAAsB,EAAE,4CAA4C;SACrE,CAAC,CAAC;IACL,CAAC;IAEM,MAAM,CAAC,iCAAiC,CAAC,OAAiB,EAAE,YAAoB;QACrF,MAAM,yBAAyB,GAAG,IAAI,yBAAyB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACvF,OAAO,sBAAsB,CAAC,yBAAyB,CAAC,UAAU,EAAE,EAAE,qCAAqC,CAAC,CAAC;IAC/G,CAAC;IAED,qBAAqB,CAAC,OAAiB;QACrC,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,CAAC;QAC9D,OAAO,IAAI,+BAA+B,CACxC,IAAI,CAAC,sBAAsB,EAC3B,QAAQ,CAAC,YAAY,CAAC,EACtB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,EAAE,CACjD,CAAC;IACJ,CAAC;IAED,gCAAgC,CAAC,WAA8B;QAC7D,MAAM,OAAO,GAAG,iBAAiB,CAAC,iCAAiC,CACjE,oCAAoC,CAAC,WAAW,CAAC,EACjD,IAAI,CAAC,sBAAsB,CAC5B,CAAC;QACF,OAAO,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC;IAED,IAAI,CAA2C;IAE/C,eAAe,CAAC,WAA8B;QAC5C,OAAO,IAAI,CAAC,IAAI,CAAC,oCAAoC,CAAC,WAAW,CAAC,CAAC,CAAC;IACtE,CAAC;IAED;;;;;OAKG;IACI,SAAS,CAAC,MAAsC;QACrD,IAAI,CAAC,IAAI,GAAG,CAAC,MAAgB,EAAE,EAAE,CAAC,IAAI,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1E,CAAC;CACF"}